Rool
ServiceMain
whm
Static task
static1
Behavioral task
behavioral1
Sample
1636854b74dc4549410b1ec7533b7412_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1636854b74dc4549410b1ec7533b7412_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1636854b74dc4549410b1ec7533b7412_JaffaCakes118
Size
43KB
MD5
1636854b74dc4549410b1ec7533b7412
SHA1
991f5615eb925d71e0d1559d1e3c03beab3b9dfa
SHA256
6dc8767d28669cb933cf772e67ca83eeca4df097516afc743518e9cc368dcce5
SHA512
49ad1e2045e44e1bdcc59a05b4e341de582000f341a4607132cbb36208df20ed499feff716d7e6f9a020b6fe6d5e73f6cc9963ce55de3afd2b065321425d8a97
SSDEEP
768:hrnUj7X9Gk9Kkra4EKZd2tIaPnk+OnQQPz+9OvwCUVwqd9+vM/norfUCCTX0LSZa:hrM7X9y4Nf2mGs5iEvwd9PvorfUCMCL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
1636854b74dc4549410b1ec7533b7412_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Rool
ServiceMain
whm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE